Policy: AWSDirectoryServiceDataReadOnlyAccess ARN: arn:aws:iam::aws:policy/AWSDirectoryServiceDataReadOnlyAccess Allowed Actions Actions Services ds:AccessDSData ds ds-data:DescribeGroup ds-data ds-data:DescribeUser ds-data ds-data:ListGroupMembers ds-data ds-data:ListGroups ds-data ds-data:ListGroupsForMember ds-data ds-data:ListUsers ds-data ds-data:SearchGroups ds-data ds-data:SearchUsers ds-data